We should mention in passing that a related topic to OOD detection is the topic of adversarial examples [1]}. These are examples that are intentionally crafted to fool a model into making wrong predictions. Adversarial examples may be important in some medical applications, but they are beyond the scope of this paper, which focuses on natural OOD data.
